Is Codeql Development Mcp Server safe to use?

Codeql Development Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install Codeql Development Mcp Server?

Codeql Development Mcp Server can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Codeql Development Mcp Server?

Codeql Development Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is Codeql Development Mcp Server actively maintained?

Codeql Development Mcp Server is actively maintained — last commit was 1 day ago. It has 25 GitHub stars.

Codeql Development Mcp Server

Name: Codeql Development Mcp Server
Author: advanced-security

by advanced-security

LLM CodeQL( AST | CFG | CLI | LSP )

25 0 tools GitHub

No known CVEs

No license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

Security Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "codeql-development-mcp-server": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/codeql-development-mcp-server)](https://mcppedia.org/s/codeql-development-mcp-server)

Read me

What Codeql Development Mcp Server does

Enabling AI-assisted CodeQL query development through the Model Context Protocol

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

37/100across 5 weighted dimensions

How we score →

0255075100

−63

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Codeql Development Mcp Server safe to use?: Codeql Development Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Codeql Development Mcp Server?: Codeql Development Mcp Server can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Codeql Development Mcp Server?: Codeql Development Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Codeql Development Mcp Server actively maintained?: Codeql Development Mcp Server is actively maintained — last commit was 1 day ago. It has 25 GitHub stars.

Similar servers

Others in security / developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.8k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.8k 1

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.7k 2

MCP Security Weekly

Get CVE alerts and security updates for Codeql Development Mcp Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Security Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "codeql-development-mcp-server": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/codeql-development-mcp-server)](https://mcppedia.org/s/codeql-development-mcp-server)

Read me

What Codeql Development Mcp Server does

Enabling AI-assisted CodeQL query development through the Model Context Protocol

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

CodeQL Development MCP Server

Enabling AI-assisted CodeQL query development through the Model Context Protocol

A comprehensive Model Context Protocol (MCP) server designed specifically for agentic AI development of CodeQL (QL) code. This server provides tools, prompts, and resources to help AI assistants write, validate, and optimize CodeQL queries for security analysis and code quality.

Features

Comprehensive Tool Suite - Wraps CodeQL CLI commands for query compilation, execution, testing, and database operations
Multi-Language Support - Supports CodeQL query development for 10 languages including Python, JavaScript, Java, C/C++, Rust, Swift, and more
AI-Optimized Prompts - Built-in prompts and resources that guide AI assistants through CodeQL development workflows
Test-Driven Development - Integrated testing tools for validating query accuracy with expected results
Flexible Transport - Supports both stdio and HTTP transport modes for different integration scenarios

Limitations

Requires CodeQL CLI to be installed separately
Performance depends on the size of CodeQL databases being analyzed
Some advanced CodeQL CLI features may not yet be exposed as tools

Project Status

Active Development - This project is actively maintained and used in production environments for AI-assisted CodeQL development.

Background

The codeql-development-mcp-server project is maintained by GitHub's CodeQL Expert Services team and builds (and hopefully improves) on the concepts from the advanced-security/codeql-development-template repository template.

The main advantages of using the codeql-development-mcp-server are:

Agnostic of development environment
Agnostic of calling Large Language Model (LLM)
MCP server tools codify advanced CodeQL development practices

Roadmap

Development priorities and open issues are tracked in GitHub Issues.

Contributing

We welcome contributions! Whether it's bug fixes, new features, documentation improvements, or additional language support, please see CONTRIBUTING.md for guidelines.

Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.

Requirements

Environment

Node.js v25.6.0 or later (nodejs.org)
Some calling LLM Bring your own LLM, but some LLMs are (much) better than others.

External Dependencies

CodeQL CLI - Must be installed and available in PATH (github.com/github/codeql-cli-binaries)

Quick Start

Install via npm (recommended)

No repository clone needed — install from npmjs.org:

# Install globally
npm install -g codeql-development-mcp-server

Or run on-demand without installing globally:

npx -y codeql-development-mcp-server

VS Code Configuration

Add to your mcp.json file:

OS	Location
Linux	`~/.config/Code/User/mcp.json`
macOS	`~/Library/Application Support/Code/User/mcp.json`
Windows	`%APPDATA%\Code\User\mcp.json`

{
  "servers": {
    "ql-mcp": {
      "command": "npx",
      "args": ["-y", "codeql-development-mcp-server"],
      "type": "stdio"
    }
  }
}

Install from GitHub Release archive

Download the latest release from GitHub Releases
Extract the archive:

tar -xzf codeql-development-mcp-server

... [View full README on GitHub](https://github.com/advanced-security/codeql-development-mcp-server#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

37/100across 5 weighted dimensions

How we score →

0255075100

−63

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Codeql Development Mcp Server safe to use?: Codeql Development Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install Codeql Development Mcp Server?: Codeql Development Mcp Server can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Codeql Development Mcp Server?: Codeql Development Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is Codeql Development Mcp Server actively maintained?: Codeql Development Mcp Server is actively maintained — last commit was 1 day ago. It has 25 GitHub stars.

Similar servers

Others in security / developer-tools

View all →

XcodeBuildMCP97

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.8k 2

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

5.8k 1

Mcp_agent_mail96

Asynchronous coordination layer for AI coding agents: identities, inboxes, searchable threads, and advisory file leases over FastMCP + Git + SQLite

2.0k 6

Figma Console Mcp96

MCP server for accessing Figma plugin console logs and screenshots via Cloudflare Workers or local mode

1.7k 2

MCP Security Weekly

Get CVE alerts and security updates for Codeql Development Mcp Server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?